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DETAILED ACTION 
Status of Claims 

1. This action is in reply to the US Application filed on 7-1-07. 

2. Claims 1-23 are currently pending and have been examined. 

Information Disclosure Statement 

3. The Information Disclosure Statement filed on 2-7-07 has been considered. An 
initialed copy of the Form 1449 is enclosed herewith. 

Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
fornn the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication In this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
states. 

5. Claims 1-3, 7, 8, 10, 11, 15, and 21 are rejected under U.S.C. 102(b) as being 
unpatentable over Kermani, U.S. Patent No. 6,895,514. 



Application/Control Number: 10/612,375 Page 3 

Art Unit: 3621 

Examiner's Note: The Examiner has pointed out particular references contained in the prior art of record 
within the body of this action for the convenience of the Applicant. Although the specified citations are 
representative of the teachings in the art and are applied to the specific limitations within the individual 
claim, other passages and figures may apply. Applicant, in preparing the response, should consider fully 
the entire reference as potentially teaching all or part of the claimed invention, as well as the context of 
the passage as taught by the prior art or disclosed by the Examiner. 

Claim 1: 

Kermani, as shown, discloses the following limitations: 

• assigning a score to a first of said keystrokes K1 (see at least column 5, 
lines 37-41): 

• assigning a score to succeeding keystrokes after K1 based upon the 
distance of the keystroke from another keystroke (see at least column 5, 
lines 62-67); 

• summing at least three of the scores of the keystrokes in the string to 
obtain a string score (see at least column 4, lines 35-38); 

• dividing the string score by the number of keystrokes used to detemiine 
the sum to obtain a normalized string score and (see at least column 4, 
lines 35-38); 

• comparing the normalized string score to a predetermined value of 
normalized string scores to determine the likelihood that the keystroke 
entries are accurate (see at least column 2, lines 29-32). 

Claim 2: 
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Kermani, as shown, discloses tlie following limitations: 

• the keystroke K2 is immediately after the keystroke K1 and each 
succeeding keystroke is provided with a score based upon its distance 
from a preceding keystroke (see at least column 5, lines 62-67). 

Claim 3: 

Kermani, as shown, discloses the following limitations: 

• each keystroke's score after K1 is based on its distance from the 
immediately preceding keystroke (see at least column 5, lines 62-67). 

Claim 7: 

Kermani, as shown, discloses the following limitations: 

• further comprising making a preliminary detennination of a risk of fraud or 
error based upon the comparative value of the nomialized string score to 
said predetermined value of normalized string scores (see at least column 
2, lines 16-22). 

Claim 8: 

Kermani, as shown, discloses the following limitations: 

• further including calculating the nomialized string scores for a plurality of 
strings, summing the normalized string scores to obtain a transactional 
score, and dividing the transactional score by the number of strings in the 
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sum to obtain a normalized transactional score and determining accuracy 
based upon the value of the normalized transactional score in comparison 
to a predetermined value of normalized transactional scores (see at least 
column 4, lines 35-38). 



Claim 10: 

Kermani, as shown, discloses the following limitations: 

• a processor (see at least column 4, lines 6-1 7); 

• a memory coupled to said processor, said memory storing keystroke fraud 
instructions adapted to be executed by said processor to assign a score to 
a keystroke Km based upon the distance of the keystroke from another 
keystroke Kn, to sum the scores of the keystrokes in a string entered on 
the keyboard to obtain a string score and to divide the sum of the 
keystroke scores by the number of keystrokes in the string to obtain a 
nomialized string score and a means for comparing said normalized string 
score to a predetermined score to determine the accuracy of said 
keystroke entries (see at least column 4, lines 6-17). 

Claim 11: 

Kermani, as shown, discloses the following limitations: 

• keystroke fraud instructions are further adapted to be executed by said 
processor to store in said memory an indication of the absence of 
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accuracy associated with said string based upon said normalized string 
score in comparison to a range of said predetermined scores (see at least 
column 8, lines 17-21). 



Claim 15: 

Kemnani, as shown, discloses the following limitations: 

• assigning a score to a keystroke km based upon the distance of the 
keystroke from another keystroke kn (see at least column 5, lines 62-67); 

• summing the scores of at least three of the keystrokes in the string to 
obtain a string score (see at least column 4, lines 35-38); 

• dividing the sum of the keystroke scores by the number of keystrokes in 
the sum to obtain a nomialized string score and comparing the same to a 
predetermined score to determine the probable accuracy of entered 
keystrokes (see at least column 4, lines 35-38 and column 2, lines 29-32). 

Claim 21 : 

Kemiani, as shown, discloses the following limitations: 

• means for assigning a score to a keystroke km based upon the 
distance of the keystroke from another keystroke kn (see at least 
column 5, lines 62-67); 

• means for summing the scores of the keystrokes in a string to obtain a 
string score (see at least column 4, lines 35-38); 
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• means for dividing tlie sum of the keystroke scores by the number of 
keystrokes in the sum to obtain a normalized string score and comparing 
the same to a predetermined value indicative of possible fraud or error 
(see at least column 4, lines 35-38 and column 2, lines 16-22). 



Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 103(a) which fomris the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



7. Claims 4-6, 9, 16. 17, 20, and 23 are rejected under U.S.C. 103(a) as being 
unpatentable over Kemnanl, U.S. Patent No. 6,895,514 in view of Brown, US Patent No. 
5,557,686. 

Claim 4: 

Kermani discloses the limitations as shown above. Kennani does not 
disclose the following limitation, but Brown does: 

• there is at least two intervening keystrokes between keystrokes K1 and 
KN (see at least column 5, lines 28-30 and column 5, lines 57-61). 
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It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kenmani to include the keystroke method of Brown since this 
allows for measuring timing between keystrokes, which ultimately aids in 
identifying the user. 

Claim 5: 

Kermani, discloses the limitations as shown above. Kermani does not 
disclose the following limitation, but Brown does: 

• the score of keystroke K2 . . . KN is an whole number plus the least 
number of adjacent key spaces between keystrokes K1 . . . KN-1 (see at 
least column 5, lines 28-30 and column 5, lines 59-61). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kemiani to include the keystroke method of Brown since this 
allows for measuring timing between keystrokes, which ultimately aids in 
identifying the user. 

Claim 6: 

Kermani, discloses the limitations as shown atiove. Kermani does not 
disclose the following limitation, but Brown does: 

• wherein the score of keystroke K2 is based upon the linear distance 
between keystrokes K1 and K2 (see at least column 5, lines 28-30 and 
column 5, lines 59-61). 
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It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani to include the keystroke method of Brown since this 
allows for measuring timing between keystrokes, which ultimately aids in 
identifying the user. 

Claim 9: 

Kermani, discloses the limitations as shown iabove. Kemriani does not 
disclose the following limitation, but Brown does: 

• further including adding an enhanced value to the score of a keystroke if 
the keystroke is shifted (see at least column 7, lines 11-17). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kemriani to include the keystroke method of Brown since this 
allows for measuring keystroke timing, which ultimately aids in identifying the 
user. 

Claim 16: 

Kermani, discloses the limitations as shown above. Kermani does not 
disclose the following limitation, but Brown does: 

• the score of keystroke km is a whole number plus the least number of 
adjacent keys spaces between keystrokes 1^ and kn (see at least column 
5, lines 59-61). 
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It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kenmani to include the keystroke method of Brown since this 
allows for measuring keystroke timing, which ultimately aids in identifying the 
user. 

Claim 17: 

Kermani, discloses the limitations as shown above. Kermani does not 
disclose the following limitation, but Brown does: 

• the score of keystroke km is based upon the linear distance between 
keystrokes km and kn (see at least column 5, lines 28-32). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani to include the keystroke method of Brown since this 
allows for measuring keystroke timing, which ultimately aids in identifying the 
user. 

Claim 20: 

Kermani, discloses the limitations as shown above. Kermani does not 
disclose the following limitation, but Brown does: 

• instructions are further adapted to be executed by said processor to 
perform the method Including adding an enhanced value to the score of 
keystroke km,if keystroke km is shifted (see at least column 7, lines 11-17). 
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It would have been obvious to one of ordinary skill in the art at the time of 
the invention to modify Kermani to include the keystroke method of Brown since 
this allows for measuring keystroke timing, which ultimately aids in identifying the 
user. 

Claim 23: 

Kermani discloses the limitations as shown above. Kermani does not disclose 
the following limitation, but Brown does: 

• means for determining if a keystroke is shifted, and adding an enhanced 
value to the score of the keystroke if the keystroke is shifted (see at least 
column 7, lines 11-17). 
It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani to include the keystroke method of Brown since this 
allows for measuring keystroke timing, which ultimately aids in identifying the 
user. 

8. Claims 12-14, 18, 19, and 22 are rejected under U.S.C. 103(a) as being 
unpatentable over Kermani, U.S. Patent No. 6,895.514 in view of Brown, US Patent No. 
5,557,686 and in further view of Kroll, U.S. Patent No. 6,405,922. 
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Claim 12: 

Kermani/Brown disclose tlie limitations as shown above. Kermani/Brown 
do not disclose the following limitation, but Kroll does: 

• keystroke fraud instructions are further adapted to be executed by said 
processor to calculate the accuracy of an online transaction entered by 
keystroke entries on a keyboard comprising summing the nomnalized 
string scores for a plurality of strings to obtain a transactional score, and 
dividing the sum of the nomiaiized string scores by the number of strings 
in the sum to obtain a normalized transactional score, whereby the 
normalized transactional score is compared to a predetermined score to 
detemiine the accuracy of the online transaction (see at least column 4, 
lines 47-48) 

It would have been obvious to one of ordinary skill In the art at the time of the 
invention to modify Kemiani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 



Claim 13: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown 
do not disclose the following limitation, but Kroll does: 

• keystroke fraud instructions are further adapted to be executed by said 
processor to store in said memory an indication of the absence of 
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accuracy based upon said normalized transactional score (see at least 

column 4, lines 47-48). 
It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kemiani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 

Claim 14: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown 
do not disclose the following limitation, but Kroll does: 

• keystroke fraud Instructions are further adapted to be executed by said 
processor to add an enhanced value to the score of certain of said 
keystrokes if said keystrokes are shifted (see at least column 4, lines 47- 
48). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kemiani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. ' 



Claim 18: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown 
do not disclose the following limitation, but Kroll does: 
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• instructions are further adapted to be executed by said processor to 
perform the method including calculating the normalized string scores for 
a plurality of strings, summing the normalized string scores to obtain a 
transactional score, and dividing the sum of the normalized string scores 
by the number of strings in the sum to obtain a nomnalized transaction 
score and comparing the same to a predetemfiined score to determine the 
probability of en^r or fraud in said keystroke entries in said online 
transaction (see at least column 4, lines 47-55). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 

Claim 19: 

Kermani/Kroll, as shown, discloses the following limitations: 

• instructions are further adapted to be executed by said processor to 
perform the method including determining a risk of fraud or error based 
upon the value of the normalized transactional score in comparison to one 
or more predetemiined scores (see at least column 4, lines 47-55). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
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this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 

Claim 22: 

Kermani/Brown disclose the limitations as shown above. Kermani further 
discloses the following limitation: 

• means for calculating the nomrialized string scores for a plurality of strings 
(see at least column 4, lines 35-38); 



Kermani/Brown disclose the limitations as shown above. Kermani/Brown 
do not disclose the following limitation, but Kroll does: 

• means for summing the normalized string scores to obtain a transactional 
score (see at least column 4, lines 47-48); 

• means for dividing the sum of the normalized string scores by the number 
of strings in the sum to obtain a normalized transactional score and 
comparing the same to a predetermined score indicative of possible fraud 
or error (see at least column 4, lines 47-48). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kemriani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Thomas West whose telephone number is 571-270- 
1236. the examiner can nomially be reached on IVI-R 7:30am - 5pm EST, ALT Fridays 
off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Fischer can be reached on 571-272-6779. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Infonnation Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status infonmation for unpublished applications is available through Private PAIR only. 
For more infonnation about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Thomas West 
Patent Examiner 
Art Unit 3621 
9-21-07 
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